Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa
File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json)
Hash identifier: J897UgT3Zeb6USjAfXmHktwGEzW3O/5AkDsfqE7gGMc=
Subject key identifier: F8:7F:13:00:98:A9:8E:BD:1A:10:2B:73:1C:78:5A:52:B1:E1:8E:9A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820D67D81F52FAAC11D120
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 216.58.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:0d:67:d8:1f:52:fa:ac:11:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c836dafd-bb29-427d-94a6-dc0ce729dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:ac:5f:14:55:64:00:bf:e9:e8:4b:64:79:
a0:54:1a:d3:c5:1a:10:ad:dc:e4:d1:4b:36:3e:68:
81:7a:5f:05:59:01:e5:dc:78:68:d8:ca:b9:5c:80:
33:b1:4d:8a:58:1f:1d:01:84:6b:84:0c:5f:25:2c:
50:b8:f6:9d:c9:cf:86:15:c1:12:e5:77:ee:6c:14:
31:4e:25:26:db:0e:99:23:98:8a:13:15:51:5a:39:
d3:3c:8f:29:9e:50:8a:06:5f:90:7a:fb:28:bd:27:
f5:90:c1:8d:62:4b:d7:d4:06:99:19:db:f7:75:56:
26:58:72:57:b2:68:ee:9b:6a:2a:9c:a9:36:10:5a:
0e:0c:c2:b8:50:23:00:3d:8e:67:6d:31:23:ac:74:
94:12:10:fc:6f:c7:f4:bb:30:bc:bd:3a:d7:03:2c:
58:11:db:17:94:d7:df:58:76:b8:e8:46:d4:c9:02:
0b:b3:20:94:d4:9c:f1:da:2c:74:41:9c:ef:87:b8:
f9:b5:cc:69:7f:63:1e:0e:91:25:85:3e:a1:27:a1:
2f:98:61:58:2e:29:a1:93:1d:b7:66:a6:75:31:44:
f0:1c:53:94:3e:91:da:ce:f4:7e:88:6c:31:94:f8:
c1:96:f5:58:46:4d:08:e0:58:d8:72:f5:90:82:a4:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:13:00:98:A9:8E:BD:1A:10:2B:73:1C:78:5A:52:B1:E1:8E:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:3f:30:26:08:f3:d2:40:b2:0d:f5:5b:6e:27:ff:4c:f5:e3:
53:ad:21:46:9f:e6:a3:96:3e:10:22:b9:c2:9d:6d:79:51:aa:
8e:71:4e:19:63:4d:cf:89:6b:d0:1b:91:c7:d7:fc:4a:64:df:
c5:ef:8d:51:25:68:e6:f4:02:84:28:58:d1:8b:43:23:8d:6b:
84:8b:06:ef:b0:01:15:ef:b1:ac:74:d9:4b:e9:1f:0d:c1:e2:
f5:a5:86:1b:a9:d6:c8:2b:dd:c8:45:1f:02:a3:f1:dd:8c:22:
10:90:ce:2d:e2:0c:f5:32:09:e8:8d:9f:e4:c1:57:40:58:04:
1e:cc:de:56:ad:c3:7b:43:00:58:e9:22:ac:a5:1f:88:f2:e8:
c1:87:08:2e:3f:22:06:5f:94:48:2d:16:46:e1:c9:4a:72:ea:
a4:1a:e3:6e:f4:60:ab:35:0e:e2:0c:68:db:ae:dc:f7:be:bc:
13:7f:28:d7:8b:09:25:2d:d2:b2:ef:8b:0e:0d:3e:91:c2:5c:
2d:84:08:89:f7:02:16:a0:bd:df:a9:33:cd:4c:81:f6:88:fc:
0c:eb:43:da:21:f6:33:e8:db:84:a2:4e:93:66:de:0d:90:5b:
13:6b:78:d5:f5:2c:48:53:7f:64:9e:ad:c7:d0:64:d7:8c:99:
c8:c2:19:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg1n2B9S+qwR0SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzgzNmRhZmQtYmIyOS00MjdkLTk0YTYtZGMwY2U3MjlkZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq2sXxRVZAC/6ehLZHmgVBrTxRoQrdzk0Us2
PmiBel8FWQHl3Hho2Mq5XIAzsU2KWB8dAYRrhAxfJSxQuPadyc+GFcES5XfubBQx
TiUm2w6ZI5iKExVRWjnTPI8pnlCKBl+QevsovSf1kMGNYkvX1AaZGdv3dVYmWHJX
smjum2oqnKk2EFoODMK4UCMAPY5nbTEjrHSUEhD8b8f0uzC8vTrXAyxYEdsXlNff
WHa46EbUyQILsyCU1Jzx2ix0QZzvh7j5tcxpf2MeDpElhT6hJ6EvmGFYLimhkx23
ZqZ1MUTwHFOUPpHazvR+iGwxlPjBlvVYRk0I4FjYcvWQgqR+UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPh/EwCYqY69GhArcxx4WlKx4Y6aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z
YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJk/MCYI89JAsg31W24n/0z141OtIUaf5qOWPhAiucKdbXlRqo5xThlj
Tc+Ja9AbkcfX/Epk38XvjVElaOb0AoQoWNGLQyONa4SLBu+wARXvsax02UvpHw3B
4vWlhhup1sgr3chFHwKj8d2MIhCQzi3iDPUyCeiNn+TBV0BYBB7M3latw3tDAFjp
IqylH4jy6MGHCC4/IgZflEgtFkbhyUpy6qQa4270YKs1DuIMaNuu3Pe+vBN/KNeL
CSUt0rLviw4NPpHCXC2ECIn3Ahagvd+pM81MgfaI/AzrQ9oh9jPo24SiTpNm3g2Q
WxNreNX1LEhTf2SercfQZNeMmcjCGc0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:14 2025 by rpki-client on console.sobornost.net